ADM 2372 Chapter Notes - Chapter 9: Information Quality, Time Shifting, Content-Control Software

Ethics Case: Facebook's 'Unfriendly' Privacy Policies (adapted from Spinello, R. (2017). Cyberethics: Morality and law in cyberspace. Jones & Bartlett Learning)

Facebook CEO, Mark Zuckerberg, couldn't quite believe all the attention he was getting. Facebook was on the verge of its initial public offering (IPO), and it seemed that the media couldn't get enough of this Cinderella story. Zuckerberg had created a primitive version of the Facebook application in his Harvard dorm room. Thanks to its immediate popularity, he commercialized this product and founded Facebook, a pioneer in social networking. There were 1.4 billion active users on Facebook and the company's revenue exceeded $12 billion. As Zuckerberg traveled around the country to promote the IPO, the press followed him everywhere. The Facebook IPO took place on May 18, 2012, making many of its brash and talented managers instant millionaires by the end of 2014.

Most people at the social network company welcomed the publicity and attention surrounding the IPO. But over the years Facebook has attracted negative publicity and unwelcome attention for its controversial privacy policies. Facebook has had to deal with several embarrassing missteps as it struggles to reconcile user privacy with an open network. The company's policies have been the object of scrutiny by the FTC, which has investigated a number of privacy-related complaints. In a recent ruling, the FTC persuaded€ both Google and Facebook to consent to a biennial audit of their privacy policies and practices for the next 20 years. What were Facebook's most contentious privacy policies, and why are key regulators still threatening to block the social media company from carrying out its strategy of boosting advertising revenue by leveraging its user information? The following is a brief historical overview.

Facebook first caught the attention of privacy advocates in 2007 when it implemented a technology known as the 'News Feed'€. This feature was designed to display in real-time changes a person makes to her user profile on the home pages of all of her online friends. To the surprise of the company, users balked at this innovation and Facebook had to abandon this default feature. In that same year, Facebook also joined a commercial venture known as the Beacon program so that every member would be notified immediately as soon as one of their friends made an online purchase. Beacon also seemed to clearly violate users' privacy expectations. As resistance mounted, Facebook abruptly ended the program.

In December 2009, Facebook once again shocked many of its users by suddenly changing its privacy settings. A person's 'friends'€ could no longer be kept concealed from the public or from each other. As a result, information that was once private such as one's profile picture, name, gender, address, professional networks, and so forth, became publicly available by default. According to Rebecca MacKinnon, these changes were motivated by the company's need to monetize this 'free'€ service and were consistent with Zuckerberg's strong personal conviction that people everywhere should be open about their lives and actions. Facebook's decision to make previously confidential information publicly available€ was reversed thanks to public protest, and users now have the capability to control access to most of their personal information.

In 2010 the company took public its instant personalization€ scheme, which allows partner websites to access Facebook information as soon as a Facebook user visits the site. This all happens by default before the user gives consent to the sharing of his or her information. In that same year, the company introduced social plug-ins, including a social widget known as the 'Like' button, that appeared on other websites (like Amazon.com); if a user likes an item she sees, she clicks on this button and the item appears in a list of things she likes in her profile. This plug-in architecture, a further evolution of cookie technology functions as follows. When a user logs into a social networking site like Facebook, the site sends a cookie to the user's browser, which is disabled only when the user logs out of his her Facebook account. As the user visits various websites, the Like architecture will report back to Facebook whether the user has clicked on the Like button (even if the user doesn't click on this button, Facebook knows that you've been to this site and looked at this item). This social widget provides a history of a user's web-browsing habits that can be linked to personally identifiable information. The social plug-in architecture has the potential to be an especially powerful mechanism for behavioral advertising, though Facebook claims that (at least for the present) it anonymizes this tracking data after a period of 90 days.

Online photos on Facebook pages have also been a bone of contention. When users post a photo on their Facebook page, they can tag it with the names of the individuals in that photo. They can also establish links to the profiles of those individuals, assuming that they too have a Facebook page. Those who come to realize that they have been tagged can serve the link to their profile but can't do anything about the actual photo.

It remains to be seen whether Facebook can successfully fend off regulators in Europe and the United States and live up to the expectations of its investors, who expect the company to be able to exploit the commercial value of the information it collects. To this end, Zuckerberg has repeatedly sought to diminish privacy expectations and encourage Facebook users to share their information in the spirit of openness and greater connectivity.

Questions:

What is the problem that is described in the case?

What are the known facts (from the case or references provided)?

Who are the key people (stakeholders) involved?

What is the timeline of events?

What are the alternative courses of action that can be implemented to solve the problem?

Which of Facebook's past or present privacy policies do you find to be the most troubling? Which ones are not a 'big deal' in your estimation?

Should social media sites like Facebook be subject to more regulations to ensure the preservation of privacy rights?

How much do you think companies like Facebook really know about their users? How much of that knowledge can be a potential revenue source? What is the economic value of such user data?

There are sometimes conflicts within the same code, between the code and the __________ and between the code and a counselor's value system.

2 points

Question 2

Section A of the ACA Code of Ethics highlights important issues within the __________________________________.

2 points

Question 3

______________________ in a code sometimes lag behind the values of society and of professional associations.

2 points

Question 4

Which section was added to the latest edition of the ACA Code of Ethics (2014)?

2 points

Question 5

Which of the following is not one of the ethical "hot spots" identified in this chapter?

2 points

Question 6

Which of the following is not a type of ethical decision-making model discussed in the text?

2 points

Question 7

_______________ has to do with protecting the independences, self-determination and freedom of choice for client.

2 points

Question 8

People who have this view of the world, see things in black and white, are very concrete, rigid, and authoritarian.

2 points

Question 9

Which section of the ACA Ethical Code (2014) offers guidelines on how to report an ethical violation?

2 points

Question 10

.__________ is the responsibility under the law for a violation of federal or state criminal statute.

2 points

Question 11

To prove that they are following the best practices of their professions, counselors should:

2 points

Question 12

______________ is the most rigorous form of credentialing.

2 points

Question 13

Theories help counselors and other helping professionals in the following way(s):

2 points

Question 14

What is a paradigm shift?

2 points

Question 15

Do psychodynamic theories consider which of the following to be important in understanding a person's functioning?

2 points

Question 16

Sigmund Freud was trained as a:

2 points

Question 17

Freud believed that there are ____________ structures that make up personality.

2 points

Question 18

Freud, and later his daughter Anna Freud, identified a number of _______________ that help people to cope with anxiety.

2 points

Question 19

___________ believed that each of us has a unique psychological type which includes the attitudes of extraversion and introversion.

2 points

Question 20

_______________________ believed that every child was born with innate and unique capabilities and is inherently moving toard the future, not determined by the past.

2 points

Question 21

Existential-humanistic approaches embrace a phenomenological perspective, stressing all but which of the following?

2 points

Question 22

Although Ludwig Binswanger is generally acknowledged as being the first existential therapist, who is seen as the person who popularized this approach through "logotherapy"?

2 points

Question 23

____________________ developed client-centered therapy.

2 points

Question 24

Today, most Gestalt therapists believe that from birth, the individual is in a constant state of ______________ through a process of need identification and need-fulfillment.

2 points

Question 25

This therapy was developed by Albert Ellis during the 1950s.

Which of the following is not a type of security control?

Directive Controls

Effective Controls

Preventive Controls

Corrective Controls

FIPS Publication 199 requires agencies to categorize their information system as

Low-impact

Medium-impact

High-impact

All of the above

Based on the FIPS PUB 200 The minimum security requirements cover -----------security -related areas with regard to protecting the confidentiality, integrity, and availability of federal information systems and the information processed, stored, and transmitted by those systems

17

3

12

5

Federal agencies will have up to -----------year(s) from the date of final NIST Special Publication 800-53to fully comply with the changes but are encouraged to initiate compliance activities immediately.

Four

Three

Two

One

Security awareness

Is the same a professional education

Is the same as background checks and verifying education

Makes it easy to find out who is a security risk

Begins the first day of employment

Base on the NIST Special Publication 800-30, integration of Risk Management into the SDLC consist of ------------phases

10

5

3

6

Base on the NIST Special Publication 800-30, The risk assessment methodology encompasses -------- primary steps

A. Five

B. Eight

C. Nine

D. Two

Base on the NIST Special Publication 800-30, integration of Risk, the control categories for both technical and nontechnical control methods can be further classified as:

A. Preventive and detective

B. preventive and defensive

C. defensive and detective

D. preventive and supportive

Which of the following is not a risk mitigation method?

A. Risk Assumption

B. Risk avoidance

C. Risk study

D. Risk limitation

The risk assessment process is usually repeated at least every ------ years for federal agencies, as mandated by OMB Circular A-130

six

five

four.

Three

Based on the MITRE Corporation’s Trusted Systems Concepts, A combination of hardware, software, and firmware that implements the Reference Monitor concept is called

Assurance system

Reference validation mechanism

Trusted computing systems

Trusted computing mechanism

The Biba model was developed to protect which of the following?

Availability

Integrity

Confidentiality

Access control

The Bell-LaPadula model was developed to protect which of the following?

A. Availability

B. Integrity

C. Confidentiality

D. Access Control

Which model is concerned with who is authorized to give access to file and folders to other users?

A. Clark-Wilson

B. Bell LaPadula

C. Biba

D. Take-Grant